cve.bz

CVE-2026-12537

10.0 criticalEPSS 0.2%

Critical (10.0) in google. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in @google/gemini-cli 0.39.1, 0.40.0-preview.3.

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file.

Severity

CVSS 4.0

10.0 critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/U:Clear

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs
CWE-78, CWE-20
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-wpqr-6v78-jr5gnpm@google/gemini-cli<0.39.10.39.1
GHSA-wpqr-6v78-jr5gnpm@google/gemini-cli>=0.40.0-preview.2 <0.40.0-preview.30.40.0-preview.3
GHSA-wpqr-6v78-jr5gGitHub Actionsgoogle-github-actions/run-gemini-cli<0.1.220.1.22

References

Check your stackJSON